Hi Abd,<div><br></div><div>Thanks a lot for this patch, it looks like just what i am after ... i will give it a go! Just as a tiny aside, Is this going against the RFC in anyway?<br><br><div class="gmail_quote">On Tue, Jul 21, 2009 at 11:22 PM, Abd4llA <span dir="ltr"><<a href="mailto:abd4lla@ahmedabdalla.net">abd4lla@ahmedabdalla.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div dir="ltr"><div>Hi,<br></div>I was facing the same situation in my company last week, so I had to create the attached patch for dhcp-4.1.0p1.<br>
The patch allows you to specify in the dhclient.conf to require a specific option be sent with a specific value.<br>The require statement is as follows:<br><br>require [<option_name> , ] [option <option_name> <value> , ] .... ; <br>
so for example:<br>require option vendor-encapsulated-options "ISC";<br>or <br>require time-offset, option vendor-encapsulated-options "ISC";<br><br>I'm gonna post this patch to the dhcp-hackers mailing list.<div>
<div></div><div class="h5"><br>
<br><div class="gmail_quote">On Tue, Jul 21, 2009 at 10:22 AM, Sten Carlsen <span dir="ltr"><<a href="mailto:stenc@s-carlsen.dk" target="_blank">stenc@s-carlsen.dk</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex">
How about using a number of uncommon options? It would be strange that<br>
"some" other server could give out a number of unusual options.<br>
<br>
You could even define your very own option that nobody else would know<br>
about.<br>
<br>
I can't tell you how but somebody else will be able to.<br>
<div><div></div><div><br>
<br>
Jon Smaller wrote:<br>
> Hi Alan,<br>
><br>
> That approach would work but would involve having firewall rules on<br>
> each of the boxes ... And for different installations of our<br>
> monitoring solution, the main DHCP server would have different ip<br>
> addresses, thus increasing the configuration complexity of the<br>
> individual boxes (I intend to have a large number of these monitoring<br>
> boxes in the field).<br>
><br>
> Also were the IP/NIC of the main server to change, then we would have<br>
> to manually reconfigure the firewall rules on each of these boxes,<br>
> which could number in the hundreds.<br>
><br>
> Jon<br>
><br>
><br>
><br>
> On 20/07/2009, at 6:58 PM, <a href="mailto:A.L.M.Buxey@lboro.ac.uk" target="_blank">A.L.M.Buxey@lboro.ac.uk</a> wrote:<br>
><br>
>> Hi,<br>
>><br>
>> you know your servers - their IP and MAC addresses - so just stick<br>
>> a host-based firewall (eg iptables for linux) onto your box<br>
>> and configure it to only allow DHCP to pass through from your<br>
>> boxes?<br>
>><br>
>> alan<br>
>> _______________________________________________<br>
>> dhcp-users mailing list<br>
>> <a href="mailto:dhcp-users@lists.isc.org" target="_blank">dhcp-users@lists.isc.org</a><br>
>> <a href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank">https://lists.isc.org/mailman/listinfo/dhcp-users</a><br>
> _______________________________________________<br>
> dhcp-users mailing list<br>
> <a href="mailto:dhcp-users@lists.isc.org" target="_blank">dhcp-users@lists.isc.org</a><br>
> <a href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank">https://lists.isc.org/mailman/listinfo/dhcp-users</a><br>
<br>
</div></div><font color="#888888">--<br>
Best regards<br>
<br>
Sten Carlsen<br>
<br>
No improvements come from shouting:<br>
<br>
"MALE BOVINE MANURE!!!"<br>
</font><div><div></div><div><br>
_______________________________________________<br>
dhcp-users mailing list<br>
<a href="mailto:dhcp-users@lists.isc.org" target="_blank">dhcp-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank">https://lists.isc.org/mailman/listinfo/dhcp-users</a><br>
</div></div></blockquote></div><br><br clear="all"><br></div></div>-- <br>Ahmed Abdalla<br>Software Engineer<br>Sun Team.<br><br>Thebe Technology. Egypt - Belgium<br>16 Nehro St. Heliopolis. Cairo<br>Egypt.<br><br><a href="http://www.sun.com/software/q-layer/" target="_blank">http://www.sun.com/software/q-layer/</a><br>
<a href="http://www.thebetechnology.com" target="_blank">http://www.thebetechnology.com</a> <br><br>
</div>
<br>_______________________________________________<br>
dhcp-users mailing list<br>
<a href="mailto:dhcp-users@lists.isc.org">dhcp-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank">https://lists.isc.org/mailman/listinfo/dhcp-users</a><br></blockquote></div><br></div>